Количество 6
Количество 6
CVE-2026-53489
containerd is an open-source container runtime. Versions prior to 2.3.2, 2.2.5 and 2.1.9 contain a bug where the CRI plugin restores container.log from a checkpoint image without validating a symlinked path. This could result in reading an arbitrary file on the host via kubectl logs. This issue has been fixed in versions 2.3.2, 2.2.5 and 2.1.9.
CVE-2026-53489
containerd is an open-source container runtime. Versions prior to 2.3.2, 2.2.5 and 2.1.9 contain a bug where the CRI plugin restores container.log from a checkpoint image without validating a symlinked path. This could result in reading an arbitrary file on the host via kubectl logs. This issue has been fixed in versions 2.3.2, 2.2.5 and 2.1.9.
CVE-2026-53489
containerd is an open-source container runtime. Versions prior to 2.3.2, 2.2.5 and 2.1.9 contain a bug where the CRI plugin restores container.log from a checkpoint image without validating a symlinked path. This could result in reading an arbitrary file on the host via kubectl logs. This issue has been fixed in versions 2.3.2, 2.2.5 and 2.1.9.
CVE-2026-53489
containerd is an open-source container runtime. Versions prior to 2.3. ...
GHSA-rgh6-rfwx-v388
Arbitrary host CRI log file read via symlink following in CRI checkpoint restore
openSUSE-SU-2026:21072-1
Security update for trivy
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2026-53489 containerd is an open-source container runtime. Versions prior to 2.3.2, 2.2.5 and 2.1.9 contain a bug where the CRI plugin restores container.log from a checkpoint image without validating a symlinked path. This could result in reading an arbitrary file on the host via kubectl logs. This issue has been fixed in versions 2.3.2, 2.2.5 and 2.1.9. | CVSS3: 6.5 | 0% Низкий | около 1 месяца назад |
 | CVE-2026-53489 containerd is an open-source container runtime. Versions prior to 2.3.2, 2.2.5 and 2.1.9 contain a bug where the CRI plugin restores container.log from a checkpoint image without validating a symlinked path. This could result in reading an arbitrary file on the host via kubectl logs. This issue has been fixed in versions 2.3.2, 2.2.5 and 2.1.9. | CVSS3: 6.5 | 0% Низкий | около 1 месяца назад |
 | CVE-2026-53489 containerd is an open-source container runtime. Versions prior to 2.3.2, 2.2.5 and 2.1.9 contain a bug where the CRI plugin restores container.log from a checkpoint image without validating a symlinked path. This could result in reading an arbitrary file on the host via kubectl logs. This issue has been fixed in versions 2.3.2, 2.2.5 and 2.1.9. | CVSS3: 6.5 | 0% Низкий | около 1 месяца назад |
| CVE-2026-53489 containerd is an open-source container runtime. Versions prior to 2.3. ... | CVSS3: 6.5 | 0% Низкий | около 1 месяца назад |
| GHSA-rgh6-rfwx-v388 Arbitrary host CRI log file read via symlink following in CRI checkpoint restore | 0% Низкий | около 2 месяцев назад | |
 | openSUSE-SU-2026:21072-1 Security update for trivy | около 1 месяца назад |
Уязвимостей на страницу